838 lines
27 KiB
Bash
Executable File
838 lines
27 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#########################################################################
|
|
# Title: XenOrchestraInstallerUpdater #
|
|
# Author: Roni Väyrynen #
|
|
# Repository: https://github.com/ronivay/XenOrchestraInstallerUpdater #
|
|
#########################################################################
|
|
|
|
SAMPLE_CONFIG_FILE="$(dirname $0)/sample.xo-install.cfg"
|
|
CONFIG_FILE="$(dirname $0)/xo-install.cfg"
|
|
|
|
# Deploy default configuration file if the user doesn't have their own yet.
|
|
if [[ ! -e "$CONFIG_FILE" ]]; then
|
|
cp $SAMPLE_CONFIG_FILE $CONFIG_FILE
|
|
fi
|
|
|
|
# See this file for all script configuration variables.
|
|
source $CONFIG_FILE
|
|
|
|
# Set some default variables if sourcing config file fails for some reason
|
|
PORT=${PORT:-80}
|
|
INSTALLDIR=${INSTALLDIR:-"/opt/xo"}
|
|
BRANCH=${BRANCH:-"master"}
|
|
LOGFILE=${LOGFILE:-"$(dirname $0)/xo-install.log"}
|
|
AUTOUPDATE=${AUTOUPDATE:-"true"}
|
|
PRESERVE=${PRESERVE:-"3"}
|
|
XOUSER=${XOUSER:-"root"}
|
|
CONFIGPATH="$(getent passwd $XOUSER | cut -d: -f6)"
|
|
|
|
# Set path where new source is cloned/pulled
|
|
XO_SRC_DIR="$INSTALLDIR/xo-src/xen-orchestra"
|
|
|
|
# Set variables for stdout print
|
|
COLOR_N='\e[0m'
|
|
COLOR_GREEN='\e[1;32m'
|
|
COLOR_RED='\e[1;31m'
|
|
COLOR_BLUE='\e[1;34m'
|
|
COLOR_WHITE='\e[1;97m'
|
|
OK="[${COLOR_GREEN}ok${COLOR_N}]"
|
|
FAIL="[${COLOR_RED}fail${COLOR_N}]"
|
|
INFO="[${COLOR_BLUE}info${COLOR_N}]"
|
|
PROGRESS="[${COLOR_BLUE}..${COLOR_N}]"
|
|
|
|
# Protocol to use for webserver. If both of the X.509 certificate files exist,
|
|
# then assume that we want to enable HTTPS for the server.
|
|
if [[ -e $PATH_TO_HTTPS_CERT ]] && [[ -e $PATH_TO_HTTPS_KEY ]]; then
|
|
HTTPS=true
|
|
else
|
|
HTTPS=false
|
|
fi
|
|
|
|
function CheckUser {
|
|
|
|
# Make sure the script is ran as root
|
|
|
|
if [[ ! "$(id -u)" == "0" ]]; then
|
|
echo -e "${FAIL} This script needs to be ran as root"
|
|
exit 0
|
|
fi
|
|
|
|
}
|
|
|
|
function ErrorHandling {
|
|
|
|
echo -e "${FAIL} Something went wrong, exiting. Check $LOGFILE for more details and use rollback feature if needed"
|
|
|
|
if [[ -d $INSTALLDIR/xo-builds/xen-orchestra-$TIME ]]; then
|
|
echo -e "${FAIL} Removing $INSTALLDIR/xo-builds/xen-orchestra-$TIME because of failed installation."
|
|
rm -rf $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
fi
|
|
}
|
|
|
|
function InstallDependenciesCentOS {
|
|
|
|
set -e
|
|
|
|
trap ErrorHandling ERR INT
|
|
|
|
# Install necessary dependencies for XO build
|
|
|
|
# only run automated node install if package not found
|
|
if [[ -z $(rpm -qa | grep ^node) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing node.js"
|
|
curl -s -L https://rpm.nodesource.com/setup_12.x | bash - >/dev/null
|
|
echo -e "\r${OK} Installing node.js"
|
|
fi
|
|
|
|
# only install yarn repo and package if not found
|
|
if [[ -z $(rpm -qa | grep yarn) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing yarn"
|
|
curl -s -o /etc/yum.repos.d/yarn.repo https://dl.yarnpkg.com/rpm/yarn.repo >/dev/null && \
|
|
yum -y install yarn >/dev/null
|
|
echo -e "\r${OK} Installing yarn"
|
|
fi
|
|
|
|
# only install epel-release if doesn't exist
|
|
if [[ -z $(rpm -qa | grep epel-release) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing epel-repo"
|
|
yum -y install epel-release >/dev/null
|
|
echo -e "\r${OK} Installing epel-repo"
|
|
fi
|
|
|
|
# only install libvhdi-tools if vhdimount is not present
|
|
if [[ -z $(which vhdimount) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing libvhdi-tools from forensics repository"
|
|
if [[ $OSVERSION == "7" ]]; then
|
|
rpm -ivh https://forensics.cert.org/cert-forensics-tools-release-el7.rpm >/dev/null
|
|
fi
|
|
if [[ $OSVERSION == "8" ]]; then
|
|
rpm -ivh https://forensics.cert.org/cert-forensics-tools-release-el8.rpm >/dev/null
|
|
fi
|
|
sed -i 's/enabled=1/enabled=0/g' /etc/yum.repos.d/cert-forensics-tools.repo
|
|
yum --enablerepo=forensics install -y libvhdi-tools >/dev/null
|
|
echo -e "\r${OK} Installing libvhdi-tools from forensics repository"
|
|
fi
|
|
|
|
# install
|
|
echo
|
|
echo -ne "${PROGRESS} Installing build dependencies, redis server, python, git, nfs-utils, cifs-utils"
|
|
if [[ $OSVERSION == "7" ]]; then
|
|
yum -y install gcc gcc-c++ make openssl-devel redis libpng-devel python git nfs-utils cifs-utils lvm2 >/dev/null
|
|
fi
|
|
if [[ $OSVERSION == "8" ]]; then
|
|
yum -y install gcc gcc-c++ make openssl-devel redis libpng-devel python3 git nfs-utils cifs-utils lvm2 >/dev/null
|
|
fi
|
|
echo -e "\r${OK} Installing build dependencies, redis server, python, git, nfs-utils, cifs-utils"
|
|
|
|
echo
|
|
echo -ne "${PROGRESS} Enabling and starting redis service"
|
|
/bin/systemctl enable redis >/dev/null && /bin/systemctl start redis >/dev/null
|
|
echo -e "\r${OK} Enabling and starting redis service"
|
|
|
|
echo
|
|
echo -ne "${PROGRESS} Enabling and starting rpcbind service"
|
|
/bin/systemctl enable rpcbind >/dev/null && /bin/systemctl start rpcbind >/dev/null
|
|
echo -e "\r${OK} Enabling and starting rpcbind service"
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function InstallDependenciesDebian {
|
|
|
|
set -e
|
|
|
|
trap ErrorHandling ERR INT
|
|
|
|
# Install necessary dependencies for XO build
|
|
|
|
if [[ $OSVERSION =~ (16|18|20) ]]; then
|
|
echo -ne "${PROGRESS} OS Ubuntu so making sure universe repository is enabled"
|
|
add-apt-repository universe >/dev/null
|
|
echo -e "\r${OK} OS Ubuntu so making sure universe repository is enabled"
|
|
echo
|
|
fi
|
|
|
|
if [[ $OSVERSION =~ (16|18) ]]; then
|
|
echo -ne "${PROGRESS} Installing Python for Ubuntu 16 and 18"
|
|
apt-get install -y python-minimal >/dev/null
|
|
echo -e "\r${OK} Python installed"
|
|
echo
|
|
fi
|
|
|
|
if [[ $OSVERSION =~ (20) ]]; then
|
|
echo -ne "${PROGRESS} Installing Python for Ubuntu 20"
|
|
apt-get install -y python2-minimal >/dev/null
|
|
echo -e "\r${OK} Python installed"
|
|
echo
|
|
fi
|
|
|
|
|
|
|
|
echo
|
|
echo -ne "${PROGRESS} Running apt-get update"
|
|
apt-get update >/dev/null
|
|
echo -e "\r${OK} Running apt-get update"
|
|
|
|
# Install apt-transport-https and ca-certificates because of yarn https repo url
|
|
echo
|
|
echo -ne "${PROGRESS} Installing apt-transport-https and ca-certificates packages to support https repos"
|
|
apt-get install -y apt-transport-https ca-certificates >/dev/null
|
|
echo -e "\r${OK} Installing apt-transport-https and ca-certificates packages to support https repos"
|
|
|
|
if [[ $OSVERSION == "10" ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Debian 10, so installing gnupg also"
|
|
apt-get install gnupg -y >/dev/null
|
|
echo -e "\r${OK} Debian 10, so installing gnupg also"
|
|
fi
|
|
|
|
# install curl for later tasks if missing
|
|
if [[ -z $(which curl) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing curl"
|
|
apt-get install -y curl >/dev/null
|
|
echo -e "\r${OK} Installing curl"
|
|
fi
|
|
|
|
# install setcap for non-root port binding if missing
|
|
if [[ -z $(which setcap) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing setcap"
|
|
apt-get install -y libcap2-bin >/dev/null
|
|
echo -e "\r${OK} Installing setcap"
|
|
fi
|
|
|
|
# only install yarn repo and package if not found
|
|
if [[ -z $(dpkg -l | grep yarn) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing yarn"
|
|
curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - >/dev/null
|
|
echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list >/dev/null
|
|
apt-get update >/dev/null
|
|
apt-get install -y yarn >/dev/null
|
|
echo -e "\r${OK} Installing yarn"
|
|
fi
|
|
|
|
|
|
# only run automated node install if package not found
|
|
if [[ -z $(dpkg -l | grep node) ]] || [[ -z $(which npm) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing node.js"
|
|
curl -sL https://deb.nodesource.com/setup_12.x | bash - >/dev/null
|
|
apt-get install -y nodejs >/dev/null
|
|
echo -e "\r${OK} Installing node.js"
|
|
fi
|
|
|
|
# if we run Debian 10 and have default nodejs v10 installed, then replace it with node 12.x
|
|
if [[ $OSVERSION == "10" ]]; then
|
|
NODEV=$(node -v 2>/dev/null| grep -Eo '[0-9.]+' | cut -d'.' -f1)
|
|
if [[ ! -z $NODEV ]] &&[[ $NODEV < 12 ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing node.js"
|
|
curl -sL https://deb.nodesource.com/setup_12.x | bash - >/dev/null
|
|
apt-get install -y nodejs >/dev/null
|
|
echo -e "\r${OK} Installing node.js"
|
|
fi
|
|
fi
|
|
|
|
# install packages
|
|
echo
|
|
echo -ne "${PROGRESS} Installing build dependencies, redis server, git, libvhdi-utils, lvm2, nfs-common, cifs-utils"
|
|
apt-get install -y build-essential redis-server libpng-dev git libvhdi-utils lvm2 nfs-common cifs-utils >/dev/null
|
|
echo -e "\r${OK} Installing build dependencies, redis server, python, git, libvhdi-utils, lvm2, nfs-common, cifs-utils"
|
|
|
|
echo
|
|
echo -ne "${PROGRESS} Enabling and starting redis service"
|
|
/bin/systemctl enable redis-server >/dev/null && /bin/systemctl start redis-server >/dev/null
|
|
echo -e "\r${OK} Enabling and starting redis service"
|
|
|
|
echo
|
|
echo -ne "${PROGRESS} Enabling and starting rpcbind service"
|
|
/bin/systemctl enable rpcbind >/dev/null && /bin/systemctl start rpcbind >/dev/null
|
|
echo -e "\r${OK} Enabling and starting rpcbind service"
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function UpdateNodeYarn {
|
|
|
|
if [[ $AUTOUPDATE == "true" ]]; then
|
|
|
|
if [ $OSNAME == "CentOS" ]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Checking updates for nodejs and yarn"
|
|
yum update -y nodejs yarn > /dev/null
|
|
echo -e "\r${OK} Checking updates for nodejs and yarn"
|
|
else
|
|
echo
|
|
echo -ne "${PROGRESS} Checking updates for nodejs and yarn"
|
|
apt-get install -y --only-upgrade nodejs yarn > /dev/null
|
|
echo -e "\r${OK} Checking updates for nodejs and yarn"
|
|
fi
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function InstallXOPlugins {
|
|
|
|
set -e
|
|
|
|
trap ErrorHandling ERR INT
|
|
|
|
if [[ "$PLUGINS" ]] && [[ ! -z "$PLUGINS" ]]; then
|
|
|
|
if [[ "$PLUGINS" == "all" ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Installing plugins"
|
|
find "$INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/" -maxdepth 1 -mindepth 1 -not -name "xo-server" -not -name "xo-web" -not -name "xo-server-cloud" -exec ln -sn {} "$INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/node_modules/" \;
|
|
else
|
|
echo
|
|
echo -ne "${PROGRESS} Installing plugins"
|
|
local PLUGINSARRAY=($(echo "$PLUGINS" | tr ',' ' '))
|
|
for x in "${PLUGINSARRAY[@]}"; do
|
|
if [[ $(find $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages -type d -name "$x") ]]; then
|
|
ln -sn $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/$x $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/node_modules/
|
|
fi
|
|
done
|
|
fi
|
|
|
|
cd $INSTALLDIR/xo-builds/xen-orchestra-$TIME && yarn >/dev/null && yarn build >/dev/null
|
|
echo -e "\r${OK} Installing plugins"
|
|
else
|
|
echo
|
|
echo -e "${INFO} No plugins to install"
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function InstallXO {
|
|
|
|
set -e
|
|
|
|
trap ErrorHandling ERR INT
|
|
|
|
TIME=$(date +%Y%d%m%H%M)
|
|
|
|
# Create user if doesn't exist (if defined)
|
|
|
|
if [[ "$XOUSER" != "root" ]]; then
|
|
if [[ -z $(getent passwd $XOUSER) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Creating missing $XOUSER user"
|
|
useradd -s /sbin/nologin $XOUSER
|
|
echo -e "\r${OK} Creating missing $XOUSER user"
|
|
sleep 2
|
|
fi
|
|
fi
|
|
|
|
# Create installation directory if doesn't exist already
|
|
if [[ ! -d "$INSTALLDIR" ]] ; then
|
|
echo -ne "${PROGRESS} Creating missing basedir to $INSTALLDIR"
|
|
mkdir -p "$INSTALLDIR"
|
|
echo -e "\r${OK} Creating missing basedir to $INSTALLDIR"
|
|
fi
|
|
|
|
# Create missing xo-builds directory if doesn't exist already
|
|
if [[ ! -d "$INSTALLDIR/xo-builds" ]]; then
|
|
echo -ne "${PROGRESS} Creating missing xo-builds directory to $INSTALLDIR/xo-builds"
|
|
mkdir "$INSTALLDIR/xo-builds"
|
|
echo -e "\r${OK} Creating missing xo-builds directory to $INSTALLDIR/xo-builds"
|
|
fi
|
|
|
|
echo
|
|
echo -e "${INFO} Fetching Xen Orchestra source code"
|
|
echo
|
|
if [[ ! -d "$XO_SRC_DIR" ]]; then
|
|
mkdir -p "$XO_SRC_DIR"
|
|
git clone https://github.com/vatesfr/xen-orchestra "$XO_SRC_DIR"
|
|
else
|
|
cd "$XO_SRC_DIR"
|
|
git pull
|
|
cd $(dirname $0)
|
|
fi
|
|
|
|
# Deploy the latest xen-orchestra source to the new install directory.
|
|
echo
|
|
echo -ne "${INFO} Creating install directory: $INSTALLDIR/xo-builds/xen-orchestra-$TIME"
|
|
rm -rf "$INSTALLDIR/xo-builds/xen-orchestra-$TIME"
|
|
cp -r "$XO_SRC_DIR" "$INSTALLDIR/xo-builds/xen-orchestra-$TIME"
|
|
|
|
if [[ "$BRANCH" == "release" ]]; then
|
|
cd $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
TAG=$(git describe --tags $(git rev-list --tags --max-count=1))
|
|
|
|
echo
|
|
echo -e "${INFO} Checking out latest tagged release '$TAG'"
|
|
|
|
git checkout $TAG 2> /dev/null # Suppress the detached-head message.
|
|
cd $(dirname $0)
|
|
elif [[ "$BRANCH" != "master" ]]; then
|
|
echo
|
|
echo -e "${INFO} Checking out source code from branch '$BRANCH'"
|
|
|
|
cd $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
git checkout $BRANCH
|
|
cd $(dirname $0)
|
|
fi
|
|
|
|
# Check if the new repo is any different from the currently-installed
|
|
# one. If not, then skip the build and delete the repo we just cloned.
|
|
|
|
# Get the commit ID of the to-be-installed xen-orchestra.
|
|
cd $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
NEW_REPO_HASH=$(git rev-parse HEAD)
|
|
NEW_REPO_HASH_SHORT=$(git rev-parse --short HEAD)
|
|
cd $(dirname $0)
|
|
|
|
# Get the commit ID of the currently-installed xen-orchestra (if one
|
|
# exists).
|
|
if [[ -L $INSTALLDIR/xo-server ]] && [[ ! -z $(readlink -e $INSTALLDIR/xo-server) ]]; then
|
|
cd $INSTALLDIR/xo-server
|
|
OLD_REPO_HASH=$(git rev-parse HEAD)
|
|
OLD_REPO_HASH_SHORT=$(git rev-parse --short HEAD)
|
|
cd $(dirname $0)
|
|
else
|
|
# If there's no existing installation, then we definitely want
|
|
# to proceed with the bulid.
|
|
OLD_REPO_HASH=""
|
|
OLD_REPO_HASH_SHORT=""
|
|
fi
|
|
|
|
# If the new install is no different from the existing install, then don't
|
|
# proceed with the build.
|
|
if [[ "$NEW_REPO_HASH" == "$OLD_REPO_HASH" ]]; then
|
|
echo
|
|
echo -e "${INFO} No changes to xen-orchestra since previous install. Skipping xo-server and xo-web build."
|
|
echo -e "${INFO} Cleaning up install directory: $INSTALLDIR/xo-builds/xen-orchestra-$TIME"
|
|
rm -rf $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
return 0
|
|
fi
|
|
|
|
# Now that we know we're going to be building a new xen-orchestra, make
|
|
# sure there's no already-running xo-server process.
|
|
if [[ $(ps aux | grep xo-server | grep -v grep) ]]; then
|
|
echo
|
|
echo -ne "${PROGRESS} Shutting down xo-server"
|
|
/bin/systemctl stop xo-server || { echo -e "${FAIL} failed to stop service, exiting..." ; exit 1; }
|
|
echo -e "\r${OK} Shutting down xo-server"
|
|
fi
|
|
|
|
# If this isn't a fresh install, then list the upgrade the user is making.
|
|
if [[ ! -z "$OLD_REPO_HASH" ]]; then
|
|
echo
|
|
echo -e "${INFO} Updating xen-orchestra from '$OLD_REPO_HASH_SHORT' to '$NEW_REPO_HASH_SHORT'"
|
|
fi
|
|
|
|
echo
|
|
echo -e "${INFO} xo-server and xo-web build quite a while. Grab a cup of coffee and lay back"
|
|
echo
|
|
echo -ne "${PROGRESS} Running installation"
|
|
cd $INSTALLDIR/xo-builds/xen-orchestra-$TIME && yarn >/dev/null && yarn build >/dev/null
|
|
echo -e "\r${OK} Running installation"
|
|
|
|
# Install plugins
|
|
InstallXOPlugins
|
|
|
|
echo
|
|
echo -e "${INFO} Fixing binary path in systemd service configuration file"
|
|
sed -i "s#ExecStart=.*#ExecStart=$INSTALLDIR\/xo-server\/bin\/xo-server#" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service
|
|
echo
|
|
echo -e "${INFO} Adding WorkingDirectory parameter to systemd service configuration file"
|
|
sed -i "/ExecStart=.*/a WorkingDirectory=$INSTALLDIR/xo-server" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service
|
|
|
|
if [[ "$XOUSER" != "root" ]]; then
|
|
echo -e "${INFO} Adding user to systemd config"
|
|
sed -i "/SyslogIdentifier=.*/a User=$XOUSER" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service
|
|
|
|
if [ "$PORT" -le "1024" ]; then
|
|
NODEBINARY="$(which node)"
|
|
if [[ -L "$NODEBINARY" ]]; then
|
|
NODEBINARY="$(readlink -e $NODEBINARY)"
|
|
fi
|
|
|
|
if [[ ! -z $NODEBINARY ]]; then
|
|
echo -ne "${PROGRESS} Attempting to set cap_net_bind_service permission for $NODEBINARY"
|
|
setcap 'cap_net_bind_service=+ep' $NODEBINARY >/dev/null \
|
|
&& echo -e "\r${OK} Attempting to set cap_net_bind_service permission for $NODEBINARY" || { echo -e "\r${FAIL} Attempting to set cap_net_bind_service permission for $NODEBINARY" ; echo " Non-privileged user might not be able to bind to <1024 port. xo-server won't start most likely" ; }
|
|
else
|
|
echo -e "${FAIL} Can't find node executable, or it's a symlink to non existing file. Not trying to setcap. xo-server won't start most likely"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [[ ! -f $CONFIGPATH/.config/xo-server/config.toml ]] || [[ "$CONFIGUPDATE" == "true" ]]; then
|
|
|
|
echo -e ${INFO} "Fixing relative path to xo-web installation in xo-server configuration file"
|
|
|
|
INSTALLDIRESC=$(echo $INSTALLDIR | sed 's/\//\\\//g')
|
|
sed -i "s/#'\/any\/url' = '\/path\/to\/directory'/'\/' = '$INSTALLDIRESC\/xo-web\/dist\/'/" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml
|
|
sleep 2
|
|
|
|
if [[ $PORT != "80" ]]; then
|
|
echo -e "${INFO} Changing port in xo-server configuration file"
|
|
sed -i "s/port = 80/port = $PORT/" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml
|
|
sleep 2
|
|
fi
|
|
|
|
if $HTTPS ; then
|
|
echo -e "${INFO} Enabling HTTPS in xo-server configuration file"
|
|
sed -i "s%# cert = '.\/certificate.pem'%cert = '$PATH_TO_HTTPS_CERT'%" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml
|
|
sed -i "s%# key = '.\/key.pem'%key = '$PATH_TO_HTTPS_KEY'%" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml
|
|
sed -i "s/# redirectToHttps/redirectToHttps/" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml
|
|
sleep 2
|
|
fi
|
|
|
|
echo -e "${INFO} Activating modified configuration file"
|
|
mkdir -p $CONFIGPATH/.config/xo-server
|
|
mv -f $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/sample.config.toml $CONFIGPATH/.config/xo-server/config.toml
|
|
#fix permissions if service is not running as root
|
|
chown -R $XOUSER:$XOUSER $CONFIGPATH
|
|
|
|
fi
|
|
|
|
echo
|
|
echo -e "${INFO} Symlinking fresh xo-server install/update to $INSTALLDIR/xo-server"
|
|
ln -sfn $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server $INSTALLDIR/xo-server
|
|
sleep 2
|
|
echo -e "${INFO} Symlinking fresh xo-web install/update to $INSTALLDIR/xo-web"
|
|
ln -sfn $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-web $INSTALLDIR/xo-web
|
|
|
|
if [[ "$XOUSER" != "root" ]]; then
|
|
chown -R $XOUSER:$XOUSER $INSTALLDIR/xo-builds/xen-orchestra-$TIME
|
|
|
|
if [ ! -d /var/lib/xo-server ]; then
|
|
mkdir /var/lib/xo-server 2>/dev/null
|
|
fi
|
|
|
|
chown -R $XOUSER:$XOUSER /var/lib/xo-server
|
|
fi
|
|
|
|
# fix to prevent older installations to not update because systemd service is not symlinked anymore
|
|
if [[ $(find /etc/systemd/system -maxdepth 1 -type l -name "xo-server.service") ]]; then
|
|
rm -f /etc/systemd/system/xo-server.service
|
|
fi
|
|
|
|
echo
|
|
echo -e "${INFO} Replacing systemd service configuration file"
|
|
|
|
/bin/cp -f $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service /etc/systemd/system/xo-server.service
|
|
sleep 2
|
|
echo -e "${INFO} Reloading systemd configuration"
|
|
echo
|
|
/bin/systemctl daemon-reload
|
|
sleep 2
|
|
|
|
echo
|
|
echo -e "${INFO} Starting xo-server..."
|
|
/bin/systemctl start xo-server >/dev/null
|
|
|
|
# no need to exit/trap on errors anymore
|
|
set +e
|
|
trap - ERR INT
|
|
|
|
timeout 60 bash <<-"EOF"
|
|
while [[ -z $(journalctl -u xo-server | sed -n 'H; /Starting XO Server/h; ${g;p;}' | grep "https\{0,1\}:\/\/\[::\]:$PORT") ]]; do
|
|
echo " waiting for port to be open"
|
|
sleep 10
|
|
done
|
|
EOF
|
|
|
|
if [[ $(journalctl -u xo-server | sed -n 'H; /Starting XO Server/h; ${g;p;}' | grep "https\{0,1\}:\/\/\[::\]:$PORT") ]]; then
|
|
echo
|
|
echo -e " ${COLOR_GREEN}WebUI started in port $PORT. Make sure you have firewall rules in place to allow access.${COLOR_N}"
|
|
echo -e " ${COLOR_GREEN}Default username: admin@admin.net password: admin${COLOR_N}"
|
|
echo
|
|
echo -e "${INFO} Installation successful. Enabling xo-server to start on reboot"
|
|
/bin/systemctl enable xo-server > /dev/null
|
|
else
|
|
echo
|
|
echo -e "${FAIL} Looks like there was a problem when starting xo-server/reading journalctl. Please see logs for more details"
|
|
journalctl -u xo-server -n 50 >> $LOGFILE
|
|
exit 1
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
|
|
function UpdateXO {
|
|
|
|
InstallXO
|
|
|
|
if [[ "$PRESERVE" != "0" ]]; then
|
|
|
|
# remove old builds. leave as many as defined in PRESERVE variable
|
|
echo
|
|
echo -ne "${PROGRESS} Removing old installations. Leaving $PRESERVE latest"
|
|
find $INSTALLDIR/xo-builds/ -maxdepth 1 -type d -name "xen-orchestra*" -printf "%T@ %p\n" | sort -n | cut -d' ' -f2- | head -n -$PRESERVE | xargs -r rm -r
|
|
echo -e "\r${OK} Removing old installations. Leaving $PRESERVE latest"
|
|
else
|
|
echo -e "${INFO} PRESERVE variable is set to 0. This needs to be at least 1. Not doing a cleanup"
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function HandleArgs {
|
|
|
|
case "$1" in
|
|
--update)
|
|
CheckMemory
|
|
UpdateNodeYarn
|
|
UpdateXO
|
|
;;
|
|
--install)
|
|
if [ $OSNAME == "CentOS" ]; then
|
|
CheckMemory
|
|
InstallDependenciesCentOS
|
|
InstallXO
|
|
exit 0
|
|
else
|
|
CheckMemory
|
|
InstallDependenciesDebian
|
|
InstallXO
|
|
exit 0
|
|
fi
|
|
;;
|
|
--rollback)
|
|
RollBackInstallation
|
|
exit 0
|
|
;;
|
|
*)
|
|
CheckMemory
|
|
StartUpScreen
|
|
;;
|
|
esac
|
|
|
|
}
|
|
|
|
function RollBackInstallation {
|
|
|
|
INSTALLATIONS=($(find $INSTALLDIR/xo-builds/ -maxdepth 1 -type d -name "xen-orchestra-*" 2>/dev/null))
|
|
|
|
if [[ $(echo ${#INSTALLATIONS[@]}) -le 1 ]]; then
|
|
echo -e "${INFO} One or less installations exist, nothing to change"
|
|
exit 0
|
|
fi
|
|
|
|
echo "Which installation to roll back?"
|
|
echo
|
|
local PS3="Pick a number. CTRL+C to exit: "
|
|
select INSTALLATION in "${INSTALLATIONS[@]}"; do
|
|
case $INSTALLATION in
|
|
*xen-orchestra*)
|
|
echo
|
|
echo -e "${INFO} Setting $INSTALLDIR/xo-server symlink to $INSTALLATION/packages/xo-server"
|
|
ln -sfn $INSTALLATION/packages/xo-server $INSTALLDIR/xo-server
|
|
echo -e "${INFO} Setting $INSTALLDIR/xo-web symlink to $INSTALLATION/packages/xo-web"
|
|
ln -sfn $INSTALLATION/packages/xo-web $INSTALLDIR/xo-web
|
|
echo
|
|
echo -e "${INFO} Replacing xo.server.service systemd configuration file"
|
|
/bin/cp -f $INSTALLATION/packages/xo-server/xo-server.service /etc/systemd/system/xo-server.service
|
|
/bin/systemctl daemon-reload
|
|
echo
|
|
echo -e "${INFO} Restarting xo-server..."
|
|
/bin/systemctl restart xo-server
|
|
echo
|
|
break
|
|
;;
|
|
*)
|
|
echo -e "${FAIL} Try again"
|
|
;;
|
|
esac
|
|
done
|
|
|
|
}
|
|
|
|
function CheckOS {
|
|
|
|
if [ -f /etc/centos-release ] ; then
|
|
OSVERSION=$(grep -Eo "[0-9]" /etc/centos-release | head -1)
|
|
OSNAME="CentOS"
|
|
if [[ ! $OSVERSION =~ ^(7|8) ]]; then
|
|
echo -e "${FAIL} Only CentOS 7/8 supported"
|
|
exit 0
|
|
fi
|
|
elif [[ -f /etc/os-release ]]; then
|
|
OSVERSION=$(grep ^VERSION_ID /etc/os-release | cut -d'=' -f2 | grep -Eo "[0-9]{1,2}" | head -1)
|
|
OSNAME=$(grep ^NAME /etc/os-release | cut -d'=' -f2 | sed 's/"//g' | awk '{print $1}')
|
|
if [[ $OSNAME == "Debian" ]] && [[ ! $OSVERSION =~ ^(8|9|10)$ ]]; then
|
|
echo -e "${FAIL} Only Debian 8/9/10 supported"
|
|
exit 0
|
|
elif [[ $OSNAME == "Ubuntu" ]] && [[ ! $OSVERSION =~ ^(16|18|20)$ ]]; then
|
|
echo -e "${FAIL} Only Ubuntu 16/18/20 supported"
|
|
exit 0
|
|
fi
|
|
else
|
|
echo -e "${FAIL} Only CentOS 7 / Ubuntu 16/18 and Debian 8/9 supported"
|
|
exit 0
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function CheckSystemd {
|
|
|
|
if [ -z $(which systemctl) ]; then
|
|
echo -e "${FAIL} This tool is designed to work with systemd enabled systems only"
|
|
exit 0
|
|
fi
|
|
}
|
|
|
|
function CheckDocker {
|
|
|
|
if [ -z $(which docker) ]; then
|
|
echo
|
|
echo -e "${FAIL} Docker needs to be installed for this to work"
|
|
exit 0
|
|
fi
|
|
|
|
}
|
|
|
|
function CheckCertificate {
|
|
if [[ "$HTTPS" == "true" ]]; then
|
|
local CERT="$(openssl x509 -modulus -noout -in "$PATH_TO_HTTPS_CERT" | openssl md5)"
|
|
local KEY="$(openssl rsa -modulus -noout -in "$PATH_TO_HTTPS_KEY" | openssl md5)"
|
|
if [[ "$CERT" != "$KEY" ]]; then
|
|
echo
|
|
echo -e "${INFO} $PATH_TO_HTTPS_CERT:"
|
|
echo -e "${INFO} $CERT"
|
|
echo -e "${INFO} $PATH_TO_HTTPS_KEY:"
|
|
echo -e "${INFO} $KEY"
|
|
echo
|
|
echo -e "{$FAIL} MD5 of your TLS key and certificate dont match. Please check files and try again."
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function CheckMemory {
|
|
SYSMEM=$(grep MemTotal /proc/meminfo | awk '{print $2}')
|
|
|
|
if [[ $SYSMEM < 3000000 ]]; then
|
|
echo
|
|
echo -e "${COLOR_RED}WARNING: you have less than 3GB of RAM in your system. Installation might run out of memory${COLOR_N}"
|
|
echo
|
|
fi
|
|
|
|
}
|
|
|
|
function PullDockerImage {
|
|
|
|
echo
|
|
docker pull ronivay/xen-orchestra
|
|
echo
|
|
echo
|
|
echo -e "${INFO} Image pulled. Run container:"
|
|
echo " docker run -itd -p 80:80 ronivay/xen-orchestra"
|
|
echo
|
|
echo -e "${INFO} If you want to persist xen-orchestra and redis data, use volume flags like:"
|
|
echo " docker run -itd -p 80:80 -v /path/to/data/xo-server:/var/lib/xo-server -v /path/to/data/redis:/var/lib/redis ronivay/xen-orchestra"
|
|
|
|
} 2>$LOGFILE
|
|
|
|
function StartUpScreen {
|
|
|
|
echo "-----------------------------------------"
|
|
echo
|
|
echo "Welcome to automated Xen Orchestra install"
|
|
echo
|
|
echo "Following options will be used for installation:"
|
|
echo
|
|
echo -e "OS: ${COLOR_WHITE}$OSNAME $OSVERSION ${COLOR_N}"
|
|
echo -e "Basedir: ${COLOR_WHITE}$INSTALLDIR ${COLOR_N}"
|
|
|
|
if [ $XOUSER ]; then
|
|
echo -e "User: ${COLOR_WHITE}$XOUSER ${COLOR_N}"
|
|
else
|
|
echo -e "User: ${COLOR_WHITE}root ${COLOR_N}"
|
|
fi
|
|
|
|
echo -e "Port: ${COLOR_WHITE}$PORT${COLOR_N}"
|
|
echo -e "Git Branch for source: ${COLOR_WHITE}$BRANCH${COLOR_N}"
|
|
echo -e "Following plugins will be installed: ${COLOR_WHITE}"$PLUGINS"${COLOR_N}"
|
|
echo -e "Number of previous installations to preserve: ${COLOR_WHITE}$PRESERVE${COLOR_N}"
|
|
echo
|
|
echo -e "Errorlog is stored to ${COLOR_WHITE}$LOGFILE${COLOR_N} for debug purposes"
|
|
echo
|
|
echo -e "Xen Orchestra configuration will be stored to ${COLOR_WHITE}$CONFIGPATH/.config/xo-server/config.toml${COLOR_N}, if you don't want it to be replaced with every update, set ${COLOR_WHITE}CONFIGUPDATE${COLOR_N} to false in ${COLOR_WHITE}xo-install.cfg${COLOR_N}"
|
|
echo "-----------------------------------------"
|
|
|
|
echo
|
|
echo -e "${COLOR_WHITE}1. Autoinstall${COLOR_N}"
|
|
echo -e "${COLOR_WHITE}2. Update / Install without packages${COLOR_N}"
|
|
echo -e "${COLOR_WHITE}3. Deploy docker container${COLOR_N}"
|
|
echo -e "${COLOR_WHITE}4. Rollback to another existing installation${COLOR_N}"
|
|
echo -e "${COLOR_WHITE}5. Exit${COLOR_N}"
|
|
echo
|
|
read -p ": " option
|
|
|
|
case $option in
|
|
1)
|
|
if [[ $(ps aux | grep xo-server | grep -v grep) ]]; then
|
|
echo "Looks like xo-server process is already running, consider running update instead. Continue anyway?"
|
|
read -p "[y/N]: " answer
|
|
case $answer in
|
|
y)
|
|
echo "Stopping xo-server..."
|
|
/bin/systemctl stop xo-server || { echo -e "${FAIL} failed to stop service, exiting..." ; exit 1; }
|
|
;;
|
|
n)
|
|
exit 0
|
|
;;
|
|
*)
|
|
exit 0
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
if [ $OSNAME == "CentOS" ]; then
|
|
InstallDependenciesCentOS
|
|
InstallXO
|
|
exit 0
|
|
else
|
|
InstallDependenciesDebian
|
|
InstallXO
|
|
exit 0
|
|
fi
|
|
;;
|
|
2)
|
|
UpdateNodeYarn
|
|
UpdateXO
|
|
exit 0
|
|
;;
|
|
3)
|
|
CheckDocker
|
|
echo
|
|
PullDockerImage
|
|
;;
|
|
4)
|
|
RollBackInstallation
|
|
exit 0
|
|
;;
|
|
5)
|
|
exit 0
|
|
;;
|
|
*)
|
|
echo "Please choose one of the options"
|
|
echo
|
|
exit 0
|
|
;;
|
|
esac
|
|
|
|
}
|
|
|
|
CheckUser
|
|
CheckOS
|
|
CheckSystemd
|
|
CheckCertificate
|
|
|
|
if [[ $# == "1" ]]; then
|
|
HandleArgs "$1"
|
|
exit 0
|
|
else
|
|
CheckMemory
|
|
StartUpScreen
|
|
fi
|